To Örebro University

oru.seÖrebro University Publications
Change search
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf
The effect of perceived organizational culture on employees’ information security compliance
Örebro University, School of Humanities, Education and Social Sciences. Department of Political Science.ORCID iD: 0000-0002-5485-8577
Örebro University, Örebro University School of Business. (CERIS)ORCID iD: 0000-0002-3265-7627
Örebro University, School of Humanities, Education and Social Sciences.ORCID iD: 0000-0001-7291-2875
Örebro University, School of Humanities, Education and Social Sciences.
2022 (English)In: Information and Computer Security, E-ISSN 2056-4961, Vol. 30, no 3, p. 382-401Article in journal (Refereed) Published
Abstract [en]

Purpose: This paper aims to investigate the connection between different perceived organizational cultures and information security policy compliance among white-collar workers.

Design/methodology/approach: The survey using the Organizational Culture Assessment Instrument was sent to white-collar workers in Sweden (n = 674), asking about compliance with information security policies. The survey instrument is an operationalization of the Competing Values Framework that distinguishes between four different types of organizational culture: clan, adhocracy,market and bureaucracy.

Findings: The results indicate that organizational cultures with an internal focus are positively related to employees’ information security policy compliance. Differences in organizational culture with regards to control and flexibility seem to have less effect. The analysis shows that a bureaucratic form of organizational culture is most fruitful for fostering employees’ information security policy compliance.

Research limitations/implications: The results suggest that differences in organizational culture are important for employees’ information security policy compliance. This justifies further investigating the mechanisms linking organizational culture to information security compliance.

Practical implications: Practitioners should be aware that the different organizational cultures do matter for employees’ information security compliance. In businesses and the public sector, the authors see a development toward customer orientation and marketization, i.e. the opposite an internal focus, that may have negative ramifications for the information security of organizations.

Originality/value: Few information security policy compliance studies exist on the consequences of different organizational/information cultures.

Place, publisher, year, edition, pages
Emerald Group Publishing Limited, 2022. Vol. 30, no 3, p. 382-401
Keywords [en]
Organizational culture, Information security policy compliance, Competing values framework, Information security policy, Information security culture, Bureaucratic culture
National Category
Information Systems, Social aspects
Research subject
Informatics
Identifiers
URN: urn:nbn:se:oru:diva-96073DOI: 10.1108/ics-06-2021-0073ISI: 000731588700001Scopus ID: 2-s2.0-85121446066OAI: oai:DiVA.org:oru-96073DiVA, id: diva2:1621328
Funder
Swedish Civil Contingencies AgencyAvailable from: 2021-12-17 Created: 2021-12-17 Last updated: 2022-06-14Bibliographically approved

Open Access in DiVA

No full text in DiVA

Other links

Publisher's full textScopus

Authority records

Karlsson, MartinKarlsson, FredrikÅström, JoachimDenk, Thomas

Search in DiVA

By author/editor
Karlsson, MartinKarlsson, FredrikÅström, JoachimDenk, Thomas
By organisation
School of Humanities, Education and Social SciencesÖrebro University School of Business
In the same journal
Information and Computer Security
Information Systems, Social aspects

Search outside of DiVA

GoogleGoogle Scholar

doi
urn-nbn

Altmetric score

doi
urn-nbn
Total: 166 hits
CiteExportLink to record
Permanent link

Direct link
Cite
Citation style
  • apa
  • ieee
  • modern-language-association-8th-edition
  • vancouver
  • Other style
More styles
Language
  • de-DE
  • en-GB
  • en-US
  • fi-FI
  • nn-NO
  • nn-NB
  • sv-SE
  • Other locale
More languages
Output format
  • html
  • text
  • asciidoc
  • rtf